home

vegas_1164bit.exe

The program is a setup application that uses the Nullsoft Install System installer. The file has been seen being downloaded from data2.mujsoubor.cz and multiple other hosts.
MD5:
8783eee0ef465b03a36dd87ba5f2033a

SHA-1:
dcc884d732b93a6d4458ae9200ffcc41ef090487

SHA-256:
cd5af6be8f35c91ad3cec743e642853355c02ae933db29866cd55b32d6382e75

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 4:36:47 AM UTC  (today)

File size:
211.6 MB (221,840,548 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Install System

Common path:
C:\users\{user}\downloads\vegas_1164bit.exe

File PE Metadata
Compilation timestamp:
2/19/2012 4:01:57 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.22

CTPH (ssdeep):
6291456:hQ91zPvbjmDd1sPniYr07OPHMZFgJdlv3uDWoy:hQjTO5CPieMngJXeDI

Entry address:
0x4131

Entry point:
55, 89, E5, 57, 56, 53, 81, EC, AC, 01, 00, 00, FF, 15, 74, 43, 43, 00, C7, 04, 24, 01, 80, 00, 00, FF, 15, 58, 44, 43, 00, 53, C7, 04, 24, 00, 00, 00, 00, FF, 15, 98, 44, 43, 00, 56, A3, F4, 27, 43, 00, C7, 04, 24, 08, 00, 00, 00, E8, 8B, 3B, 00, 00, A3, 50, 28, 43, 00, 8D, 85, 84, FE, FF, FF, 57, C7, 44, 24, 10, 00, 00, 00, 00, C7, 44, 24, 0C, 60, 01, 00, 00, 89, 44, 24, 08, C7, 44, 24, 04, 00, 00, 00, 00, C7, 04, 24, A9, B2, 40, 00, FF, 15, AC, 44, 43, 00, 83, EC, 14, C7, 44, 24, 04, AA, B2, 40, 00, C7...
 
[+]

Code size:
33.5 KB (34,304 bytes)

The file vegas_1164bit.exe has been seen being distributed by the following 6 URLs.

http://data2.mujsoubor.cz/downloadFile.php?n=dmVnYXNfMTE2NGJpdC5leGU=&s=3021lg93lpen49gkm64mjta111&r=db42dbe80c9198589e6177628748e443

http://data2.stiahnut.sk/downloadFile.php?n=dmVnYXNfMTE2NGJpdC5leGU=&s=v88h6qa0s2g0dhiblfr1lu0ls7&r=14dcf36a83751a8f754d64022474015c

http://data2.mujsoubor.cz/downloadFile.php?n=dmVnYXNfMTE2NGJpdC5leGU=&s=ncag86rtf1nh96t968u0a83010&r=78f953ef5b9d1a32a7909acab0106465

http://data2.stiahnut.sk/downloadFile.php?n=dmVnYXNfMTE2NGJpdC5leGU=&s=a24scqv20tql4r3qih07o3ao73&r=37449c139da7c7c840bac90c104bbb49

http://data2.mujsoubor.cz/downloadFile.php?n=dmVnYXNfMTE2NGJpdC5leGU=&s=qu9ot854g3eea0ecpbnu0v9i74&r=cdd6b606177a5c90a0d670e9e7321018

http://data2.mujsoubor.cz/downloadFile.php?n=dmVnYXNfMTE2NGJpdC5leGU=&s=mdtfpp9klkcfoqe4mlmdni4952&r=c0d5b8664380ec27be3d91529d41a1f0

Scan vegas_1164bit.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.